Senior Cloud Security Architect — Associate Director

S&P Global; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health care coverage

Retirement planning

Continuing education program with loan

Family perks

Employee discounts

Job summary

Standard & Poor’s Financial Services LLC in New York seeks an Associate Director to lead the security architecture for the S&P Global Ratings Cloud and applications infrastructure. You will define cloud security requirements, guide engineering and design, and implement secure-by-default solutions across CI/CD and runtime environments.

Responsibilities include building automation for cloud asset discovery, deploying CSPM and workload protection, hardening cloud-native containers, and

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, or related IT field.
• 5+ years in security engineering or related roles with cloud design/assessment.
• Experience designing cloud solutions with Azure, AWS or GCP and CSPM/CWP concepts.

Responsibilities

• Lead security architecture for the S&P Global Ratings Cloud and applications infrastructure.
• Define cloud security requirements and oversee secure design and implementation.
• Build automation for cloud asset discovery and configuration management.
• Support Secure SDLC and shift-left security across design, code, and run-time.
• Collaborate to verify controls and harden cloud-native containers.

Skills

Cloud security

Infrastructure as code

Cloud security automation

Education

Bachelor's degree in Computer Science, Computer Engineering, or related IT field

Tools

Azure

AWS

GCP

Job description

Standard & Poor’s Financial Services LLC in New York seeks an Associate Director to lead the security architecture for the S&P Global Ratings Cloud and applications infrastructure. You will define cloud security requirements, guide engineering and design, and implement secure-by-default solutions across CI/CD and runtime environments.

Responsibilities include building automation for cloud asset discovery, deploying CSPM and workload protection, hardening cloud-native containers, and